Three problems face anyone trying to justify retaliation for a cyber attack: where did it come from, who did it and what response is appropriate, explained Eugene H. Spafford, a computer science professor at Purdue University in West Lafayette, IN, and director of the school’s Center for Education and Research in Information Assurance and Security.